adding httpsession, but problem with prod server